• t 

» I 

Serial No. 10/580,954 

IN THE CLAIMS: 

The text of all pending claims, (including withdrawn claims) is set forth below. Cancelled 
and not entered claims are indicated with claim number and status only. The claims as listed 
below show added text with underlining and deleted text with str i k e through . The status of each 
claim is indicated with one of (original), (currently amended), (cancelled), (withdrawn), 
(Previously Presented), (previously presented), or (not entered). 

Please AMEND claims 1 1 and 23 in accordance with the following: 

1-10. (Cancelled) 

1 1 . (Currently Amended) A security module for encrypting a telephone conversation 
between at least one first telecommunication terminal using a Voice over IP (VoIP) system in a 
packet-oriented data network, and at least one second telecommunication terminal in a public 
switched telephone network that is distinct from the packet-oriented data network and that is at 
least one of analog and digital and is connected to the packet-oriented network via a gateway, 
said security module being connected into a connecting line of one of the first and second 
telecommunication terminals and comprising: 

a protocol processing unit processing data packets transported on the packet-oriented 
network using the encrypted transport protocol with keys for the encrypted transport protocol 
exchanged using a key exchange protocol, converting voice signals, created by the one of the 
first and second telecommunication terminals at which said security module is connected, into 
data packets for transport via the encrypted transport protocol and converting data packets, 
arriving at said security module after transport via the encrypted transport protocol, into voice 
signals; 

a modem connection unit, used when said security module is connected in a connecting 
line at a second telecommunication terminal, setting up a modem connection between the 
second telecommunication terminal and at least one of a gateway and another second 
telecommunication terminal, with the data packets being transported using the encrypted 
transport protocol, along with messages of the key exchange protocol, via the modem 
connection, wherein 

a point-to-point protocol connection is used over the modem connection in transporting 
the data packets using the encrypted transport protocol, as well as messages of the key 
exchange protocol, and 

the encrypted transport protocol is Secure Real Time Transport Protocol. 
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12-13. (Cancelled) 

14. (Previously Presented) A security module in accordance with claim 11 , wherein the 
key exchange protocol is multimedia Internet keying. 

1 5. (Previously Presented) A security module in accordance with claim 11 , wherein for a 
telephone conversation, messages of the key exchange protocol are transported via a session 
initiation protocol, and 

wherein said protocol processing unit processes the session initiation protocol. 

16. (Cancelled) 

17. (Previously Presented) A security module in accordance with claim 11, wherein the 
telephone network is an ISDN network, and said modem connection unit sets up the modem 
connection over a B-channel in the ISDN network. 

18-19. (Cancelled) 

20. (Previously Presented) A security module in accordance with claim 11, wherein the 
packet-oriented network is an Internet protocol-based data network and a local area network, 
and said modem connection unit sets up the modem connection in accordance with at least one 
of a V90 and a V92 standard. 

21. (Previously Presented) A security module in accordance with claim 20, wherein said 
security module is connected into a connecting cable between a telephone handset and the one 
of the first and second telecommunication terminals. 

22. (Cancelled) 

23. (Currently Amended) A method performed by a security module for encrypting a 
telephone conversation between at least one first telecommunication terminal using a Voice over 
IP (VoIP) system in a packet-oriented data network and at least one second telecommunication 
terminal in a public switched telephone network that is distinct from the packet-oriented data 
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network and that is at least one of analog and digital and is connected to the packet-oriented 
network via a gateway, said security module being connected into a connecting line of one of the 
first and second telecommunication terminals and comprising: 

processing data packets transported on the packet-oriented network using the encrypted 
transport protocol with keys for the encrypted transport protocol exchanged using a key 
exchange protocol, converting voice signals, created by the one of the first and second 
telecommunication terminals at which said security module is connected, into data packets for 
transport via the encrypted transport protocol and converting data packets, arriving at said 
security module after transport via the encrypted transport protocol, into voice signals; 

when said security module is connected in a connecting line at a second 
telecommunication terminal, setting up a modem connection between the second 
telecommunication terminal and at least one of the gateway and another second 
telecommunication terminal, with the data packets being transported using the encrypted 
transport protocol, along with messages of the key exchange protocol, via the modem 
connection; and 

using a point-to-point protocol connection over the modem connection in transporting the 
data packets using the encrypted transport protocol, as well as messages of the key exchange 
protocol, wherein 

the encrypted transport protocol is Secure Real Time Transport Protocol. 
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